Ethical Hacking & Penetration Testing

Key Details

This module will allow the student to understand, analyse and manage the ethical hacking process by learning the concepts, techniques and processes through videos, practical exercises and laboratories. Obtaining the ability to use the results of an audit for management and decision making.

Time commitment

Total workload: ca. 125 hours

Contact hours:

• Virtual lessons: 15 h.
• Audiovisual teaching resources: 6 h.
• Mentorship: 16 h.
• Collaborative work: 7 h.
• Case studies: 17 h.

Self-study:

• Study of the basic material: 30 h.
• Reading the supplementary material: 20h.
• Lab works: 10 h.
• Self-evaluation test: 4 h.

Assessment

• Self-evaluation test: 4 h. (10%)
• Lab Works: 10 h. (15%)
• Collaborative work: 7 h. (15%)
• Final proctored exam: 2 h. (60%)

Subjects covered

1. Ethical hacking fundamentals (history & main concepts)

• Description: Description of the History and fundamentals of the Ethical Hacking process, and its evolution, regulations and policies.
• Level of difficulty: medium

2. Operating systems vulnerabilities & attack vectors

• Description: Description of the OS vulnerabilities and attack vectors, methodology of identification, detection, and neutralization. (Methods, tools, and procedures)
• Level of difficulty: medium
• 3. Network vulnerabilities & attack vectors (IT, IoT, OT)
• Description: Description of the network vulnerabilities and attack vectors, methodology of identification, detection, and neutralization. (Methods, tools, and procedures)
• Level of difficulty: medium

4. Web vulnerabilities & attack vectors

• Description: Description of the Web vulnerabilities and attack vectors, methodology of identification, detection, and neutralization. (Methods, tools, and procedures)
• Level of difficulty: medium

5. Cloud vulnerabilities & attack vectors

• Description: Description of the Cloud vulnerabilities and attack vectors, methodology of identification, detection, and neutralization. (Methods, tools, and procedures)
• Level of difficulty: medium

6. Pentesting methodologies

• Description: Theorical description of the types of different methodologies to develop a pentesting, the stages and requirements for it, and the generation and interpretation of executive and technical reports.
• Level of difficulty: low

7. Footprinting and reconnaissance

• Description: Fundamental description of the process for reconnaissance and footprinting stage, the tools used and the concepts to apply in an ethical hacking audit.
• Level of difficulty: medium

8. Vulnerability analysis and exploitation tools

• Description: Description and explanation of the vulnerability analysis, the tools used for analysis, and the tools for exploitation. Interpretation of the analysis.
• Level of difficulty: low

9. Ethics and legislation in ethical hacking

• Description: Definition and explanation of the laws, regulations, and policies for an ethical hacking process. (national and International)
• Level of difficulty: low

10. Ethical Hacking certification roadmap:

• Description: Introduction to the certification in Ethical Haking (study preparation, in technical and theorical aspects)
• Level of difficulty: low

11.-12. Module Wrap-Up and Practical Insights

Learning objectives

On successful completion of this module, the learner will be able to:

1. Demonstrate knowledge of the basic principles and importance of ethical hacking and system auditing, including methodologies, techniques, and the laws, policies, and legal aspects involved in the ethical hacking process.

2. Analyse and manage the methodologies and techniques used in ethical hacking.

3. Recognise how the tools used in ethical hacking audits function and interpret their results.

4. Explain the importance of ethical hacking practices and describe the methodologies used for penetration testing in various environments.

5. Demonstrate skills in analysing, identifying, and mitigating vulnerabilities in computer systems.

6. Identify threats and attack methodologies during the development of an ethical hacking audit.

7. Analyse the security posture of systems by identifying vulnerabilities and distinguishing between different types of cyberattacks.

8. Manage technical and executive reports to support decision-making.

Skills:

• Manage ethical hacking audit processes by selecting specific attacks according to the results required.
• Plan and manage the ethical hacking process.
• Prepare results reports after the ethical hacking process to support decision-making.